We'll create fresh WordPress site with Disable XML-RPC & Unset X-Pingback installed. You have 20 minutes to test the plugin after that site we'll be deleted.
This plugin disables the XML-RPC API on a WordPress site running 3.5 or above and unsets the X-Pingback header.
Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.